Dynamic data protection method and device for preventing database collision attacks

Abstract

The invention relates to a dynamic data protection method and device for preventing database collision attack. The method comprises the steps of changing a database storage structure for storing authentication information into double tables from a single table; isolating and obfuscating the public attribute and the authentication secret attribute of the authentication entity, wherein the authentication entity public attribute table does not contain any field associated with the authentication secret attribute table, and a main key of the authentication secret attribute table is a dynamic hashvalue; inquiring the database double tables when an application system carries out authentication, and calculating an authentication entity public attribute hash value corresponding to the authentication entity public attribute dynamically. The safety protection device based on the method is deployed at the front end of a database and maintains the updating and calculation query of double tables.According to the present invention, the traditional mode of strong association and static binding of authentication public attributes and authentication secret attributes is changed, a data protectiontechnology of sensitive attribute separation and dynamic updating is provided, the authentication record information of a database is differentiated, the influence of database leakage on database collision attack is reduced to the maximum extent, and the safety of a website and an authentication system is guaranteed.

Description

technical field [0001] The invention relates to a method and device for anti-crash library attack, in particular to a data dynamic protection method and device for anti-collision library attack, belonging to the field of computer network security. Background technique [0002] The Internet has penetrated into every aspect of human society, and everyone relies on more and more Internet applications for work, entertainment and life. Human memory is limited, so in order to reduce the burden on the brain and simplify login operations, it is very common for multiple websites to set similar user names and passwords, or even a set of account passwords to log in to all Internet applications. This also brings convenience to hacker attacks, and there is a huge potential Security Risk. Among them, credential stuffing attacks have a wide range of influence, low difficulty, and great harm, and have become an important threat to Internet applications. There are three concepts associated...

AI Technical Summary

Problems solved by technology

This low-frequency behavior is difficult to identify, allowing attackers to lurk for a long time and achieve their goals

[0006]Comparative analysis shows that the above-mentioned protection methods are all security defense methods after information leakage, and can only take passive countermeasures against the behavior of attempting to log in, without solving the leakage The fact that information is exploited has limited effectiveness in defending against credential stuffing attacks

Images